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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1 . (Currently amended) A method for providing a user device with a set of access codes, the 
method comprising: 

in the us e r devic e , storing an e ncryption k e y and an id e ntification cod e , and s e nding a m e ssag e 
containing th e id e ntification cod e to a s e rv e r via a communications n e twork; 
inthosor\^or, 

receiving fi-om a user device a first message comprising an identification code associated with an 
encryption key stored in the user device, wherein the first message is sent via a communications network; 

storing an encryption key corresponding to the encryption key and the identification code stored in 
the user device, 

allocating the set of access codes on receipt of the identification code from the user device, 
performing a look up fimction based on the identification code received in the message to retrieve 
the encryption key from storage, 

encrypting the set of access codes using the retrieved encryption key to produce an encrj^ted set, 

sending a second message containing the encrypted set to the user device for storing via th e n e twork ; 

in th e us e r d e vic e , d e crypting th e e ncrypt e d s e t r e c e iv e d from th e s e rv e r using th e k e y in storag e , and 
storing the d e cr>^ptcd set of access codes for use by a us e r of th e user device; and, 

upon the a_number of unused access codes for the user device reaching a predetermined threshold74ii 
the sor\'or, sending a third m essage containing a new set of access codes to the user device via the network^ 
wherein the new set of access codes are encrypted with the encryption key associated with the identification 
code r 

in the user device, storing th e n e w s e t for us e by a us e r of th e us e r d e vic e ; and 
selectively: 

in th e user devic e , tracking the access cod e s us e d by the user, generating a request in 
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response to the number of unused access cod e s r e aching a pr e d e t e rmin e d thr e shold, and sending 
m e ssag e containing th e r e qu e st to th e s e rv e r; and 

in th e s e rv e r, s e nding th e m e ssag e containing th e n e w s e t of acc e ss cod e s on r e c e ipt of th e 
r e qu e st; or 
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— in the s e rv e r, tracking th e acc ei s i s cod ei s us e d by th e us e r, and s e nding th e m e ssag e 

containing the new set of access codes to the user device in r e spons e to th e numb e r of unus e d 
access codes reaching a predetennined tlireshold; or 

in th e s e rv e r, g e n e rating a n e w k e y, e ncrypting th e n e w k e y with th e pr e vious k e y, and 

sending a mossago containing tho oncryptod now koy to tho usor dovico via tho network; and, in 
the user device, decrypting the new key received from the server using the previous key, and 
storing the decrypted new k e y in plac e of th e pr e vious k e y; or 

— in th e s e rv e r, e ncrypting a new set of access cod e s with th e n e w k e y to produc e a n e w k e y 
e norjfpt e d s e t, and s e nding a m e ssag e containing th e n e w k e y e ncrypt e d s e t to th e us e r d e vic e via th e 
network, and, 

in th e us e r d e vic e , d e crypting th e n e w k e y e ncrypt e d s e t using th e n e w k e y, and storing th e 

d e crypt e d n e w s e t for us e by a us e r of th e us e r d e vic e ; or 

in the user device, generating a public/private key pair, and s e nding a m e ssag e containing 
the public key of the pair to th e s e rv e r via th e n e twork, 

in th e s e rv e r, g e n e rating a s e ssion k e y, e ncrypting th e s e t of acc e ss cod e s with th e s e ssion 

k e y to produc e a s e ssion k e y e ncrypted set, encrypting the session k e y with th e public k e y to 
produce an oncr3fptcd session key, sending a message containing tho session key cncr>T3tod sot and 
tho oncr>T3tod session koy to the user device via, the network, and, 

in tho usor device, decrypting the encrypted session key with tho private koy of tho pair to 

r e cov e r th e s e ssion k e y, d e crypting th e s e ssion k e y e ncrypt e d s e t with th e r e cov e r e d s e ssion k e y 
to r e cov e r th e s e t, and storing th e d e crypt e d s e t for us e by a us e r of th e us e r d e vic e. 

2.-41. (Canceled) 
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42. (New) The method of claim 1 further comprising: 

receiving a request for the new set of access codes from the user device, wherein the user device 
tracks its own access code use, comparing the number of unused access codes to the predetermined 

threshold after every use; and 

sending the new set of access codes to the user device upon receipt of the request. 

43. (New) The method of claim 1 fiirther comprising: 

tracking the access codes used by the user device, and 

sending the new set of access codes to the user device in response to the number of unused access 
codes reaching a predetemiined tlireshold. 

44. (New) The method of claim 42 wherein the request is sent from the user device responsive to a 
manual input from the user. 

45. (New) The method of claim 1 further comprising: 

receiving from the user device a fourth message comprising a public key of a public/private key pair 
generated at the user device; 
generating a session key; 

encrypting the set of access codes with the session key to produce a session key encrypted set; 
encrypting the session key with the public key to produce an encrypted session key; and 
sending a message containing the session key encrypted set and the encrypted session key to the 
user device via the network. 
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